Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2A2630EFF161E3491A84A5B4F6FB68CF0439ACC404494B7BF1C391929FA76C3E/0/3137302e38322e3138382e302f32332d3234203d3e203237393031.roa
File:                     3137302e38322e3138382e302f32332d3234203d3e203237393031.roa (raw, json)
Hash identifier:          USYuLikRsnosScnl12800AlOSwUVUw3bOJJY0aca2uw=
Subject key identifier:   6B:19:C8:01:B0:DE:BB:4A:FB:84:3E:E8:A8:D7:9B:1C:B5:14:FD:E8
Certificate issuer:       /CN=191DE519F25FDF692CBDC10A0964A4B3D9CDA91F
Certificate serial:       0ABB8C2DBDBBEA598B8BFCF0B9B980A66085C10B
Authority key identifier: 19:1D:E5:19:F2:5F:DF:69:2C:BD:C1:0A:09:64:A4:B3:D9:CD:A9:1F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/191DE519F25FDF692CBDC10A0964A4B3D9CDA91F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2A2630EFF161E3491A84A5B4F6FB68CF0439ACC404494B7BF1C391929FA76C3E/0/3137302e38322e3138382e302f32332d3234203d3e203237393031.roa
Signing time:             Tue 05 Mar 2024 17:42:39 +0000
ROA not before:           Tue 05 Mar 2024 17:37:39 +0000
ROA not after:            Tue 04 Mar 2025 17:42:39 +0000
asID:                     27901
IP address blocks:        170.82.188.0/23 maxlen: 24

Validation:               Failed, certificate revoked on Thu 18 Apr 2024 19:50:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:bb:8c:2d:bd:bb:ea:59:8b:8b:fc:f0:b9:b9:80:a6:60:85:c1:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=191DE519F25FDF692CBDC10A0964A4B3D9CDA91F
        Validity
            Not Before: Mar  5 17:37:39 2024 GMT
            Not After : Mar  4 17:42:39 2025 GMT
        Subject: CN=6B19C801B0DEBB4AFB843EE8A8D79B1CB514FDE8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:1b:82:40:bd:cb:bf:33:02:fe:63:38:4a:fa:
                    16:e4:cd:3c:ef:65:22:53:f3:5a:82:8d:09:54:bc:
                    37:31:17:02:09:6d:93:0f:a8:33:b3:0c:b8:ca:05:
                    3f:9b:6c:4e:d3:e7:bf:93:cb:8f:ad:67:86:bf:15:
                    ec:41:74:1b:af:a6:8a:9a:87:25:a8:30:d3:a9:d0:
                    ff:81:01:62:c2:63:0a:08:3b:d3:cb:b5:bf:09:70:
                    dc:c8:1a:53:2a:f1:dc:f1:9b:c6:73:84:98:5b:55:
                    6f:bf:62:0c:5d:0c:88:d0:ef:f0:83:2a:bc:1d:74:
                    55:70:87:ca:db:f2:ab:8b:c5:ad:af:54:07:7d:e7:
                    3e:ea:91:97:7c:5b:e1:56:19:75:7a:28:f7:e5:34:
                    3d:9d:e0:64:35:45:ac:8e:ef:f4:bf:ac:65:f3:4f:
                    98:87:65:4f:14:93:a0:e0:6a:01:4d:4c:dd:8d:ce:
                    b7:e4:ff:ca:39:ef:9e:75:7b:d1:d3:12:a4:ec:fc:
                    98:1e:93:6e:30:84:5a:91:49:69:7d:ed:cb:37:2f:
                    d4:6c:4f:09:0f:06:ad:55:87:c7:90:92:13:03:b8:
                    85:8d:da:50:98:2c:b7:81:2d:d8:ef:a4:0d:82:1a:
                    74:a1:b4:e1:78:46:56:38:f0:99:9f:bd:52:a3:4d:
                    17:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:19:C8:01:B0:DE:BB:4A:FB:84:3E:E8:A8:D7:9B:1C:B5:14:FD:E8
            X509v3 Authority Key Identifier:
                keyid:19:1D:E5:19:F2:5F:DF:69:2C:BD:C1:0A:09:64:A4:B3:D9:CD:A9:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2A2630EFF161E3491A84A5B4F6FB68CF0439ACC404494B7BF1C391929FA76C3E/0/191DE519F25FDF692CBDC10A0964A4B3D9CDA91F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/191DE519F25FDF692CBDC10A0964A4B3D9CDA91F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2A2630EFF161E3491A84A5B4F6FB68CF0439ACC404494B7BF1C391929FA76C3E/0/3137302e38322e3138382e302f32332d3234203d3e203237393031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.188.0/23

    Signature Algorithm: sha256WithRSAEncryption
         52:f5:2c:49:fe:d0:b0:f9:46:58:7b:77:cb:74:41:7d:96:07:
         37:f9:96:36:36:2d:e6:4c:23:18:d8:79:20:d3:bb:9c:ac:b6:
         f4:85:c2:7d:f3:52:ff:07:91:74:b1:10:f6:dd:30:b6:4f:62:
         90:66:c5:9c:6c:f6:e8:eb:d4:75:e4:0c:1f:a7:d0:bc:a3:5e:
         df:d6:bc:d9:a8:44:bb:78:6c:9c:a8:af:d9:b9:e5:09:86:99:
         33:13:5f:81:56:08:a9:73:4c:0d:22:0f:65:ed:a6:ee:90:e7:
         38:71:99:00:3b:e6:0f:2a:29:e9:c2:ef:2f:37:5e:cc:a3:3d:
         91:4f:37:2b:86:ae:cc:df:b6:cd:97:5c:17:f2:e1:d5:bb:48:
         d5:e3:4f:24:20:fa:7e:69:a2:df:cf:14:76:cd:e8:de:95:f8:
         74:09:47:05:2a:d9:31:9e:37:75:a0:7b:1b:5a:90:b0:6e:b2:
         3a:d7:56:14:55:a7:8b:bb:7b:a9:17:bb:0b:55:82:d0:d8:67:
         33:a1:e6:3e:70:ca:c9:1d:bd:a7:e2:7f:4a:1f:c6:8f:22:11:
         b9:c9:fc:7f:f0:ef:3e:9f:a6:fd:78:4b:5b:c9:66:7a:95:98:
         fd:fa:c4:be:14:ad:c0:4c:54:a1:a1:d8:e9:dc:e3:81:56:ab:
         62:99:f3:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:25 2024 by rpki-client on console-fra.rpki-client.org